1-Attachment 2 - Compliance Certification Form.pdf

ATTACHMENT 2 - COMPLIANCE CERTIFICATION FORM

Respondent Company: _________________________________________________________________ I, the undersigned authorized representative on behalf of the above-named company, certify that the services proposed in this RFP response satisfy the following mandatory minimum requirements. Further, I attest to the Company’s understanding of and agreement to full compliance with these mandatory requirements, with the knowledge that compliance with each statement is required in order for this proposal to be accepted and considered by the College. The College has set the following minimum mandatory qualifications for responding Vendors. Failure to meet these requirements will disqualify the Vendor from responding and will result in rejection of the Supplier’s proposal. Indicate the understanding of and ability to meet each requirement listed below.

Proposer must be able to certify Vendor is licensed to do business in the State of Texas or provide a commitment that it will become licensed in Texas within thirty

(30) calendar days of being selected as the recommended Vendor.

Vendor is able and willing to execute TCCD’s standard contract provisions, including those required by state statutes.

The proposed solution must be delivered as a Software as a Service (SaaS) solution. The Vendor is responsible for all activities and costs associated with hardware and hosting, software products, maintenance and operations, and service management, etc.

The proposed solution must provide common data structures in a one-to-many model so that all customers of the solution are operating on the same platform and version.

The proposed solution must be licensed through a subscription, fee-for-service or similar model.

The proposed solution must be accessible via commonly used web browsers operating on any device (i.e., mobile-enabled).

TCCD follows Section 508 of the Rehabilitation Act accessibility standards.

Section 508 compliance is a legal requirement. Any online software / application / website needs to be compliant with Web Content Accessibility Guidelines (WCAG)

2.0 A and AA standards.

• Vendors should be able to provide past compliance reports and/or conduct specific accessibility tests to demonstrate adherence to Section 508 and WCAG standards.

• It is preferred that any software meet WCAG 2.1 A and AA standards Proposer, as well as all providers of all recommended third-party tools, must be able to certify FedRAMP and TX-RAMP certifications, as required by Texas Administrative Code 202.77.

Proposer utilizes systematic compliance and security standards, and a comprehensive security plan that includes data protection and privacy measures in compliance with the laws of Texas and the United States. This includes specific experience with Texas security standards. Proposers must adhere to IT control standards defined by the Texas Department of Information Resources (DIR), including those outlined in 1 TAC 202.5 and 202.77. Proposers are required to encrypt data at rest and in transit, secure data disposal, and access logging.

Proposer’s access must be managed and logged accordingly. Proposers must comply with policies prohibiting the use of high-risk applications (e.g., TikTok) on government-owned devices (Covered Applications and Prohibited Technologies | Texas Department of Information Resources). Proposer will provide documentation of security controls and audit readiness for audits by state agencies.

Software must comply with HB 2504, including requirements for both syllabi and CVs.

Responding firm has been in operation as a provider of syllabus management software for a minimum of five (5) full years.

Responding firm has completed three (3) SaaS implementations of same syllabus management tool being proposed in their RFP response.

Proposer has experience effectively implementing SaaS solutions at higher education institutions with similar or greater complexity to TCCD.

Responding firm can deliver reliable, effective management of software implementation at all phases, and has the breadth and depth to do so continuously through post-go-live support.

Responding firm can deliver reliable, effective management of end-user preparation, training, and support at all phases, and has the breadth and depth to do so continuously through post-go-live support.

https://dir.texas.gov/information-security/covered-applications-and-prohibited-technologies https://dir.texas.gov/information-security/covered-applications-and-prohibited-technologies